summaryrefslogtreecommitdiff
path: root/layout/base/crashtests/410967.html
blob: 4895384f54796194da00d9f423c2bb9e88d5c1e1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<DOCTYPE html>
<html>
<head>
<script type="text/javascript">

function boom()
{
  var t = document.body.firstChild;
  t.data = "a" + t.data;
}

</script>
</head>

<body onload="boom();" style="width: 1px;">b c&#1603;</body>

</html>